If you use eBay you may have just downloaded this virus – warning over 'severe' threat

If you use eBay you may have just downloaded this virus – warning over 'severe' threat

eBay users targeted by hackers in malware attack and popular shopping site says it's not planning to fix the flaw anytime soon.

Published 4th February 2016

GETTY/YOUTUBE

VIRUS: eBay users are being warned over severe vulnerability

eBay bargain hunters should be aware that they are at risk from a new virus scam.

A severe vulnerability has been discovered in the popular shopping site which is allowing cyber criminals to distribute malware and gain access to users personal details.

The problems were discovered by security firm Check Point who say if this flaw is left unpatched, eBay users will continue to be exposed to potential phishing attacks and data theft.

The scam works by the cyber attacker setting up an eBay store with listings for products which contains malicious code.

Customers can be tricked into opening the page using a pop-up message on the attacker’s eBay store.

This entices the user into downloading an official looking eBay mobile application, by offering a one-time 25% discount.

THE VIDEO BELOW SHOWS THE SCAM IN ACTION

YOUTUBE

WARNING: This fake message could leave you vulnerable to hackers

If the malicious application is downloaded it can be used for phishing attacks or to download malware.

Oded Vanunu, Security Research Group Manager at Check Point, said: “The eBay attack flow provides cybercriminals with a very easy way to target users: sending a link to a very attractive product to execute the attack.

"The main threat is spreading malware and stealing private information.

"Another threat is that an attacker could have an alternate login option pop up via Gmail or Facebook and hijack the user’s account,”

After the flaw was discovered, Check Point says it disclosed details of the vulnerability to eBay on Dec 15, 2015.

However, on January 16, 2016, eBay stated that they have no plans to fix the vulnerability.

In a statement to Daily Star Onine a spokesman for eBay said: "As a company, we’re committed to providing a safe and secure marketplace for our millions of customers around the world.

"We take reported security issues very seriously, and work quickly to evaluate them within the context of our entire security infrastructure."

20 Years of eBay

Happy 20th Birthday eBay: Here's a collection of the strangest items found for sale over the years!

1 / 27

SWNS.com

The eBay advert for RAF Neatishead airbase near Norwick in Norfolk which has been put up for sale for £2.5m